The LDAP option installs Novell SecureLogin into LDAP v3 directory environments (for example, Novell eDirectory 8.8 or later).
You can specify more than one LDAP server for the Novell SecureLogin installation. Although the dialog box in the installation program only allows you to specify one LDAP server, you can specify additional servers by modifying the automate.ini file.
The LDAP option does not require the Novell Client for Windows. However, if Novell Client32 is installed on the workstation, Client32 is the initial authentication or GINA. If you want LDAP authentication to be the initial authenticator, you must uninstall Novell Client32.
Log in to the workstation as an administrator.
Double-click the Novell SecureLogin.msi located in the SecureLogin\Client directory of the Novell SecureLogin 7.0 SP1 installer package to begin the install process. The Installation Wizard launches.
Click . The License Agreement page is displayed.
Accept the license agreement, then click Next.
The Destination Folder page is displayed. By default, the program is saved in C:\Program Files\Novell\SecureLogin\.You can accept the default folder or choose to change. To change, click and navigate to your desired folder.
Click . The Select a datastore for SecureLogin (that is the installation environment) page is displayed.
Select Novell eDirectory as the platform where Novell SecureLogin stores its data, then click .
If the Novell Client is installed, the installation program recommends the Novell Client for Windows option. Otherwise, LDAP is recommended.
In the complete mode of installation, the install takes the default values and proceeds with the installation. If the Novell Client is installed, the default Account association is Novell Client association. If you do not have not Novell Client installed, the default Account association is Windows association.
However, if you want to associate the account association to Workstation, change the registry setting in hklm/software/novell/login/ldap as follows:
DoNTAssoc REG_SZ 1
DoClient32Assoc REG_SZ 0
If you have selected LDAP, choose when you want to log in to LDAP.
The three LDAP log in options are:
When Logging into Windows: If you select this option, the default Windows login dialog box is replaced by the Novell SecureLogin authentication dialog. If the directory authentication is successful, Novell SecureLogin launches seamlessly.
After Successfully logging into Windows: If you select this option, Novell SecureLogin login dialog box appears after logging in to Windows and before the desktop screen appears. In this scenario too, Novell SecureLogin launches seamlessly.
When SecureLogin Starts: If you have earlier selected the Launch SecureLogin on Startup option, Novell SecureLogin launches after the desktop comes up. Otherwise, the desktop loads and you must manually launch Novell SecureLogin.
Click .
Specify the LDAP server information. The smart card option page is displayed.
(Optional) If you want to use smart card and if ActiveClient is detected in your system, select > click , then continue with Step 11.
If you do not want to use smart card, select > click , then continue with Step 13.
Select a cryptographic service provider from which Novell SecureLogin requests PKI credentials through a Microsoft Crypto API.
Select a PKCS#11 compatible library required for accessing the smart card, then click .
NOTE:This specifies the location of the Cryptographic Token Interface installed as part of the smart card vendor’s software. These API files are used by Novell SecureLogin to communicate with the smart card.
Manually configuring the third-party smart card PKCS library assumes a high level of understanding the Cryptographic Service Provider’s product.
Select whether SecureLogin is to install the SecretStore client, the NMAS client, or both, then click .
NOTE:Select Novell SecretStore only if SecretStore is installed on a server. For more information on SecretStore, see “Installing SecretStore” in the SecretStore 3.4 Administration Guide.
The Novell SecretStore option installs the SecretStore client, which provides additional security. If you deselect this option and want to install it later, you must uninstall SecureLogin, then run the SecureLogin installation again.
However, if you install the SecretStore client and then later run the install program and deselect the SecretStore client, you will cause problems with the directory cache. All the credential sets that are stored in SecretStore will be unavailable to the eDirectory client. Nevertheless, as long as the local cache is enabled, you can still run SecureLogin. The local cache populates the eDirectory cache.
The uninstall program does not delete user credentials. The Novell NMAS Client option installs the NMAS client. SecureLogin uses this option with the AAVerify command, to enable advanced authentication access to an application and also for NMAS authentication using LDAP.
(Conditional) If you selected the NMAS client, select one or more NMAS login methods, then click .
Here, selecting the Simple Password option is mandatory if Universal Password is not created or configured in eDirectory.
Select post-login methods, then click .
Select the installation features. Click .
Click . The Ready to Install the Program dialog box is displayed.
Click .
Click . By default, the Launch ReadMe option is selected.
Specify when you want to restart the computer, then click .
NOTE:The ?syscontext variable indicates the computer name instead of displaying the context in which the user’s directory object resides.